Blocked connection to 207.232.22.109

[RandomBozo]

Every time I start Windows Live Mail, MalwareBytes reports blocking a connection to 207.232.22.109. This is not every mail connect/check, just on program start. If this is an infection, ZoneAlarm Extreme failed to prevent it and MalwareBytes does not detect it on either a Full scan or a Flash scan.

I am running Windows 7 Home Premium, SP1, all available updates/patches installed. Windows Live Mail is Version 2011 (Build 15.4.3508.1109).

MalwareBytes is version 1.5.1.1100, database 6221.

So is this a positive or a false positive? If a positive, how can I find it and remove it?

Thanks in advance...

[daledoc1]

Hello and welcome, randombozo:

IP blocks can sometimes be a false-positive, but they can also be a real block of a bad IP, or even indicative of a system infection.

In the case of the latter 2, MBAM is "doing its job" correctly to block that particular IP.

Until an expert arrives to help sort this out for you, please:

read these articles here: http://forums.malwarebytes.org/index.php?showtopic=20806 and here: http://forums.malwarebytes.org/index.php?showtopic=21076

and then please

post here: http://forums.malwarebytes.org/index.php?showforum=42

(you may wish to include a link back to this thread, so that the mods/admins can merge this one with the new thread at the FP forum).

----------------------------

If, on the other hand, you suspect your computer might be infected, then

please read & follow the instructions in this article here: http://forums.malwarebytes.org/index.php?showtopic=69723

and then please

start a new thread here: http://forums.malwarebytes.org/index.php?showforum=7

An authorized, trained malware expert will provide one-on-one, free assistance checking and cleaning your system.

HTH,

daledoc1

Edited March 31, 2011 by daledoc1